HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Score Sports

bd_5196726309203904 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 7, 2025

Filed

Nov 19, 2025

To disclose

15 weeks

Affected

10state residents only

Confidence

66%

Full breach record for Score Sports →

Score Sports (American Soccer Company Inc.) notified the New Hampshire Attorney General of a data event affecting 10 NH residents. Unauthorized access to its website occurred between April 14, 2025, and August 19, 2025. The company discovered suspicious activity on August 7, 2025. Affected data included names and payment card information. Score Sports engaged third-party specialists, secured the website, implemented technical safeguards, and offered credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 115 days

discovery → filing · 15 weeks / 104 days

Apr 14, 2025

Begins

Aug 7, 2025

Discovered

Nov 19, 2025

Filed

vs. sector median

+7 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10 affectedView incident

Name: American Soccer Company Inc.
norm: american soccer

Name: Score Sports
norm: score sports
Industry: Retail & Consumerllm

Discovered: Aug 7, 2025
Breach occurred: Apr 14, 2025 – Aug 19, 2025
Undetected for: 115 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 18, 2025
Affected individuals: 10state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Engaged third-party specialists to assist with determining the nature and scope of the event
Secured the website
Undertook a thorough investigation
Implemented additional technical safeguards
Offered complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(104 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/american-soccer-score-sports-20251119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 19, 2025
Raw hash: 4f2e91683d91bc27c1820517d5d5d6aad5b6fd13e78bc2f523350771eae48df8

Reporting entityAmerican Soccer Company Inc.

Victim entityScore Sports

Incidentdiscovered Aug 7, 2025

Stated responseEngaged third-party specialists to assist with determining the nature and scope of the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov